69fb0b7092d4f247ac065abc6b06042b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

69fb0b7092d4f247ac065abc6b06042b_JaffaCakes118
Size

586KB
MD5

69fb0b7092d4f247ac065abc6b06042b
SHA1

8d8d9b846e2f4624063806291c5875953d67457c
SHA256

3eec66b77b94ef402c0b11c496df2f27867d0406dc59540d0bfaff4b271ecc2b
SHA512

4f06d42fed4c033b1d835f0b7fc79450a8432c1168f4232d5534f26ec9bc07f5ed6df0a33736f41849b37be3279d23b0fa2b77dfb68ab92caaab9d3ec33a6b78
SSDEEP

12288:osiOZO5I+h2gOoIMUUtN5y1iyqTU/zWjdp9fs:+eO5I22lMUUEiyqM+dp9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69fb0b7092d4f247ac065abc6b06042b_JaffaCakes118

Files

69fb0b7092d4f247ac065abc6b06042b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bf8cc53b4ffb54142b447034a9734346

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
SetLastError
TlsFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetCurrentProcessId
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
HeapSize
HeapReAlloc
VirtualAlloc
SetFilePointer
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
ReadFile
CloseHandle
CreateFileA
LocalFileTimeToFileTime
lstrcpyA
AreFileApisANSI
LocalFree
FileTimeToLocalFileTime
QueryPerformanceFrequency
GetModuleHandleA
SetSystemTime
LocalAlloc
LoadLibraryA
GetProcAddress
lstrcmpiA
GetLastError
MultiByteToWideChar
TerminateProcess
RtlUnwind
RaiseException
IsBadReadPtr
HeapValidate
GetModuleFileNameW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FileTimeToSystemTime
Sleep
LoadLibraryW
FormatMessageA
GetProcessHeap
GetTickCount
GetModuleHandleW
HeapFree
QueryPerformanceCounter
GetCurrentProcess
SystemTimeToFileTime
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
GetLocaleInfoW
GetStringTypeA
HeapAlloc
lstrlenA
SetPriorityClass
ExitProcess
InterlockedIncrement

user32

DefWindowProcA
EndDialog
GetDlgItem
ReleaseDC
PeekMessageA
GetSysColor
SetWindowPos
GetCursorPos
SetMenu
RedrawWindow
GetMenuItemCount
IsWindow
CreateWindowExA
GetWindowLongA
MessageBoxA
DispatchMessageA
DefDlgProcA
DestroyMenu
CreatePopupMenu
DestroyCursor
SetWindowLongA
SetRect
GetMenu
EnableWindow
InflateRect
TranslateMessage
DrawFocusRect
GetDC
GetIconInfo
WinHelpA
LoadCursorA
DialogBoxParamA
CopyRect
GetWindow
LoadImageA
BeginPaint
SendMessageA
SetFocus
GetClientRect
FindWindowExA
EndPaint
ClientToScreen
DestroyWindow
GetClassNameA
SetWindowRgn
SetTimer
ScreenToClient
GetWindowRect
RegisterClassExA
PostQuitMessage
SendDlgItemMessageA
FillRect
GetMenuItemID
DrawTextA
DrawIconEx
GetParent
LoadIconA
InvalidateRgn
wsprintfA

gdi32

BitBlt
FrameRgn
SetTextColor
CreateHatchBrush
DeleteDC
CreateFontA
StretchBlt
SetBkColor
ExcludeClipRect
CreateBitmap
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
FillRgn
CreateRoundRectRgn
CreatePatternBrush
GetClipBox
GetTextMetricsA
CreateEllipticRgnIndirect
GetPixel
GetObjectA
GetStockObject
ExtTextOutA
CreateSolidBrush
TextOutA

comdlg32

PageSetupDlgA

advapi32

SetFileSecurityA
IsValidAcl
CloseServiceHandle
SetEntriesInAclA
LogonUserW
SetSecurityDescriptorGroup
SetServiceObjectSecurity
EnumDependentServicesA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetAce
QueryServiceObjectSecurity
ImpersonateLoggedOnUser
InitializeAcl
AllocateAndInitializeSid
SetSecurityDescriptorOwner
QueryServiceStatusEx
GetSecurityDescriptorDacl
ControlService
GetLengthSid
IsValidSecurityDescriptor
GetFileSecurityA
BuildExplicitAccessWithNameA
AddAccessAllowedAce
AddAce
FreeSid
OpenSCManagerA
OpenServiceA

ole32

CoInitialize
OleInitialize
CoUninitialize
PropVariantClear
PropVariantCopy
CoCreateInstance

oleaut32

SysAllocString

avifil32

AVIFileInfoA
AVIFileInit
AVIStreamGetFrameOpen
AVIStreamRelease
AVIStreamStart
AVIFileExit
AVIStreamGetFrame
AVIStreamLength
AVIStreamGetFrameClose
AVIFileGetStream

avicap32

capCreateCaptureWindowA

msimg32

TransparentBlt
GradientFill

winmm

waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutUnprepareHeader
sndPlaySoundA

iphlpapi

GetAdapterOrderMap

comctl32

ord413
ord412
ord17

pdh

PdhCollectQueryData
PdhAddCounterA
PdhOpenQueryA
PdhCloseQuery
PdhAddCounterW
PdhGetFormattedCounterValue

rpcrt4

UuidCreate
UuidToStringA
RpcStringBindingComposeA
RpcStringFreeA

gdiplus

GdipAddPathArc
GdipCloneBrush
GdipFree
GdipDrawPath
GdipDeleteBrush
GdiplusStartup
GdipCreatePen1
GdipCreatePath
GdipFillPath
GdipCreateFromHDC
GdipDeletePath
GdipAddPathLine
GdipAlloc
GdipCreateSolidFill
GdipClosePathFigure
GdipSetPathFillMode

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

uxtheme

CloseThemeData
DrawThemeBackground

sensapi

IsNetworkAlive

wldap32

ord211
ord143

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf8cc53b4ffb54142b447034a9734346

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

avifil32

avicap32

msimg32

winmm

iphlpapi

comctl32

pdh

rpcrt4

gdiplus

setupapi

uxtheme

sensapi

wldap32

Sections

.text Size: 424KB - Virtual size: 423KB

.rdata Size: 68KB - Virtual size: 68KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 65KB - Virtual size: 65KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 424KB - Virtual size: 423KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 65KB - Virtual size: 65KB

.reloc
Size: 21KB - Virtual size: 21KB